What are your rights?
Right of access
You have the right to obtain confirmation from Hestiva about whether or not your personal data is being processed and, if that is the case, to obtain access to that personal data and additional information about the processing of your personal data. Hestiva therefore provides you with a copy of your personal data.
Right to rectification
You have the right to obtain rectification of inaccurate or incomplete personal data. If possible, you can provide additional personal data to complete the collection of personal data.
Right to erasure (right to be forgotten)
You have the right to submit a request to delete your personal data. Hestiva will delete your personal data if your personal data is no longer necessary for the purposes for which it was collected, if you withdraw consent on which the processing is based and there is no other legal basis for the processing, if you object to the processing and your interests outweigh, or if Hestiva is legally obliged to delete your personal data.
Right to restriction
In some cases you have the right to obtain from Hestiva the restriction of the processing of your personal data. This means that Hestiva temporarily pauses the processing of your personal data, for example if you have contested the accuracy of your personal data or have objected to the processing of your personal data. If the request is granted, Hestiva will not further process the personal data in question during the term of the restriction, unless this is permitted on the basis of the GDPR.
Right to object
You have the right to object to the processing of personal data based on Hestiva's legitimate interests. Hestiva will then no longer process the personal data, unless Hestiva demonstrates that there are compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Objection to direct marketing
Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. In that case, Hestiva will no longer process your personal data for those purposes.
Data portability
You have the right to receive your personal data that you have provided to Hestiva in a structured, commonly used and machine-readable form and you have the right to forward this data to another controller, where the processing is based on your consent or on an agreement.
Right to withdraw consent
Where the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of the processing before it has been withdrawn.
Notice-and-Takedown (NTD)-procedure:
Hestiva values the protection of rights of individuals and organisations on the internet and makes every effort to delete any unlawful or infringing content or information from its platform. In order to do so Hestiva uses the following procedure:
1. Submitting a request for deletion
If you are of the opinion that content or information on our platform is unlawful or infringing, you can submit a request for deletion to Hestiva. The request must be submitted via the contact form on our website and has to contain the following information:
- A detailed description of the content or information for which the request for deletion is being submitted;
- The reason(s) why the content or information is unlawful or infringing;
- The location of the content or information on our platform;
- Any possible pieces of evidence supporting the request;
- Your contact details, including your name, address, e-mail address and phone number.
2. Evaluation of the request
After receiving the request, Hestiva will evaluate the request and seek contact with you as soon as possible to further discuss and verify the request. Hestiva will also seek contact with the person or party that posted the content or information to notify them of this request.
3. Deleting the content or information
If the request for deletion is granted, Hestiva will remove the relevant content or information from its platform as quickly as possible. If necessary, Hestiva will also block access to its platform for the person or party in question. Hestiva will inform the requesting party of the deletion as soon as possible.
4. Objection to the request
If the person or party who posted the content or information objects to the request for deletion, Hestiva will review the objection and make a decision. Hestiva will inform the requesting party of its decision as soon as possible.
Exercising your rights
To exercise your rights, we ask you to send a request to welcome@hestiva.nl.
To ensure that the request for access has been made by you, we may ask you to send a copy of your proof of identity with the request. Make your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and Citizen Service Number (BSN) black in this copy. This is to protect your privacy.
We recommend using the CopyID app from the Dutch government to make a safe copy of your identity card.
We will respond to your request as soon as possible, within one month of the receipt of the request.
Hestiva would also like to point out that you have the opportunity to file a complaint with the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can do that via this link.
How we protect personal data
Hestiva takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized changes.
If you have the impression that your data is not properly secured or there are indications of misuse, please contact welcome@hestiva.nl.
